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(TS//SI//REL) MHS leverages XKEYSCQRE Deep-Give Packet Analysis to Identify Feasibility of QUANTUM Against Yahoo and Hotmail 


(TS//SI//REL) Automated deep packet analysis of Yahoo and Hotmail providers gives keen insight into the potential success of QUANTUM I HtORY exploitation against these services. 


(TS//SI//REL) QUANTUMTHEORY is a set of CNQ man-on-th e-side capabilities that involves real-time packet inject in response to passive collection of target communications. QUANTUMTHEORY 
inspects each packet, one at a time for a set of keywords that determine if the packet originated from a CNE target and if a modified response to that packet might result in exploitation of the client 
computer Because each packet is inspected individually, if keywords occur across packet boundaries the QUANTUMTHEORY technique will not tip the SI G I NT system to attempt exploitation of a 
client As HTTF headers and the size of cookies grows, the likelihood of all keywords occurring within a single packet reduces. MHS analysts, in collaboration with XKEYSCQRE and the RGC, 
productized DRA.G GABLE KITTEN, an XKEYSCQRE Map/Reduce analytic that leverages the packets collected and made accessible to analytics by XKEYSCQRE DEEFDIVE systems. 

DRA.G GABLE KITTEN identifies the QUANTUMTHEORY keywords in a packet capture and generates statistics for each service (currently Hotmail and Yahoo) to determine how often all of the 
keywords occur within a single packet This would not have been possible without XKEYSCQRE providing a platform for analysis to mass-deploy packet-level processing. Approximately 50% of 
Hotmail and 90% of Yahoo sessions contain the keywords necessary within a single packet to be targeted by QUANTUMTHEORY. 
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